2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20380 | HIGH | 7.5 | 1.4% | Jun 3, 2021 | IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain se... |
| CVE-2021-32926 | HIGH | 7.5 | 2.2% | Jun 3, 2021 | When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the ... |
| CVE-2021-28848 | HIGH | 7.5 | 1.6% | Jun 3, 2021 | Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window t... |
| CVE-2021-32923 | HIGH | 7.4 | 1.4% | Jun 3, 2021 | HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (speci... |
| CVE-2021-28847 | HIGH | 7.5 | 1.4% | Jun 3, 2021 | MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change request... |
| CVE-2021-28812 | HIGH | 8.8 | 1.6% | Jun 3, 2021 | A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vuln... |
| CVE-2021-32625 | HIGH | 8.8 | 4.4% | Jun 2, 2021 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A... |
| CVE-2021-3529 | HIGH | 7.1 | 0.7% | Jun 2, 2021 | A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copi... |
| CVE-2021-28677 | HIGH | 7.5 | 2.3% | Jun 2, 2021 | An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to de... |
| CVE-2021-28676 | HIGH | 7.5 | 2.5% | Jun 2, 2021 | An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance wa... |
| CVE-2021-3530 | HIGH | 7.5 | 2.4% | Jun 2, 2021 | A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version... |
| CVE-2021-3546 | HIGH | 8.2 | 0.5% | Jun 2, 2021 | An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions ... |
| CVE-2021-24012 | HIGH | 7.3 | 0.5% | Jun 2, 2021 | An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an ... |
| CVE-2021-23895 | HIGH | 8 | 1.9% | Jun 2, 2021 | Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authe... |
| CVE-2021-23894 | HIGH | 8.8 | 2.2% | Jun 2, 2021 | Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unaut... |
| CVE-2021-29090 | HIGH | 7.2 | 1.7% | Jun 2, 2021 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in S... |
| CVE-2021-32656 | HIGH | 8.6 | 1.8% | Jun 1, 2021 | Nextcloud Server is a Nextcloud package that handles data storage. A vulnerability in federated share exists in versions... |
| CVE-2021-31684 | HIGH | 7.5 | 2.3% | Jun 1, 2021 | A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which c... |
| CVE-2021-22123 | HIGH | 8.8 | 77.3% | Jun 1, 2021 | An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x,... |
| CVE-2021-32924 | HIGH | 8.8 | 19.9% | Jun 1, 2021 | Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because th... |
| CVE-2021-3516 | HIGH | 7.8 | 2.0% | Jun 1, 2021 | There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be pr... |
| CVE-2021-3495 | HIGH | 8.8 | 1.0% | Jun 1, 2021 | An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw ... |
| CVE-2021-3412 | HIGH | 7.3 | 0.8% | Jun 1, 2021 | It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap... |
| CVE-2021-33184 | HIGH | 7.7 | 1.0% | Jun 1, 2021 | Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15... |
| CVE-2021-33183 | HIGH | 7.9 | 0.3% | Jun 1, 2021 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now